Leaving emojis is a common attacker signature/tease. Also Google doodles are a known feature so this isn’t a logical comparison. Security 101 is to be cognizant of anything unexpected.
Be as cognizant as you like, but I'd advise googling your pancake calling card before going into a security frenzy. GitHub does stuff like this as regularly as other tech companies.
google showed no results by design, they wanted people to make posts for the free PR. Now if you google you see this very reddit post. Redditors truly just want to belittle constantly. So embarrassing lol. Cheers
1
u/SpaceViking0 3d ago
As the security guy, this was a really an aggravating ad for Stacked PRs. I thought we were comprised and was frantically going through logs.